Side-by-side from public catalog data. 3 vendors.
| Dimension | OneSpan | Wultra | Akamai |
|---|---|---|---|
| Independently verifiedHas anyone other than the vendor confirmed this? | Limitedchecked 3 of 4 | Limitedchecked 3 of 4 | Limitedchecked 3 of 4 |
| Operating durabilityIs this a real, durable business? | Strongchecked 3 of 4 | Strongchecked 3 of 4 | Strongchecked 3 of 4 |
| Behaviour under stressWhat do they do when something goes wrong? | Limitedchecked 2 of 3 | Limitedchecked 2 of 3 | Mixedchecked 2 of 3 |
| Attribute | OneSpan | Wultra | Akamai |
|---|---|---|---|
| Website | onespan.com ↗ | wultra.com ↗ | akamai.com ↗ |
| Status | Unclaimed | Unclaimed | Unclaimed |
| Categories | Data Security Posture Management (DSPM), MFA & Passwordless, Identity Verification, Runtime Application Self-Protection | MFA & Passwordless, Identity Verification, Mobile App Security, Runtime Application Self-Protection, Decentralized Identity | API Security, Attack Surface Management (ASM), WAF / DDoS / App Protection, Secure Access Service Edge (SASE/SSE), AI / LLM Security, MFA & Passwordless, Identity Threat Detection and Response, Runtime Application Self-Protection, Threat Hunting |
| Total products | 5 | 6 | 17 |
| Public materials (datasheets, whitepapers, case studies) | 7 found → | None found | None found |
| Certifications (compliance claims, keyword-matched) | None found | None found | None found |
| Security headers (vendor's own website) | 5/5 |
| Disclosure postureDo they tell you the awkward things unprompted? | Limitedchecked 3 of 3 | Limitedchecked 3 of 3 | Limitedchecked 3 of 3 |
|---|
| MomentumAre they still shipping, or coasting? | Limitedchecked 1 of 2 | Strongchecked 2 of 2 | Strongchecked 2 of 2 |
|---|
| Not checked yet |
| Publishes pricing (vs. “contact us”-only) | No | No | No |
|---|
| Publishes a status page | No | No | Yes → |
|---|
| GitHub org (open-source presence) | No | Yes → | Yes → |
|---|
| Domain registered (RDAP, registry record) | 2011 → | 2012 → | 1998 → |
|---|
| DNSSEC (their own domain) | No | No | Yes → |
|---|
| CAA (restricts which CAs can issue certs) | Yes → | Yes → | No |
|---|
| Trust center (live compliance portal) | No | No | No |
|---|
| HSTS preloaded (HTTPS enforced from the first connection) | No | No | Yes → |
|---|
| Strengths (neutral, vendor-sourced) | — | — | API Security: API security delivered on a global edge/CDN with integrated WAAP and large-scale traffic protection. |
|---|---|---|---|
| Gaps / watch-outs | — | — | API Security: Edge-platform context; deep API behavioral discovery/posture is one part of a broad portfolio. |
| MFA & Passwordless |
| Runtime Application Self-Protection |
| AI / LLM Security | — | — |
| API Security | — | — |
| Attack Surface Management (ASM) | — | — |
| Data Security Posture Management (DSPM) | — | — |
| Decentralized Identity | — | — |
| Identity Threat Detection and Response | — | — |
| Identity Verification | — |
| Mobile App Security | — | — |
| Network Firewall (NGFW) | — | — |
| Secure Access Service Edge (SASE/SSE) | — | — |
| Threat Hunting | — | — |
| WAF / DDoS / App Protection | — | — |